Malware

Attacks with the multi-stage RONINGLOADER payload have been launched by the advanced persistent threat operation Dragon Breath to facilitate updated Gh0st RAT malware deployment as part of a campaign mostly aimed at Chinese speakers, The Hacker News reports.

Attackers advanced to a more evasive infection chain between two waves of attacks.

GBHackers News reports that North Korean state-sponsored threat actors have been leveraging JSON storage services to distribute malware as part of the Contagious Interview campaign, which has been underway since 2023.

The deceptive extension, formerly available for download on the Chrome Web Store, was designed to encode seed phrases into synthetic Sui-style addresses hidden in blockchain transactions.

Joint law enforcement team targeted three malware strains at the heart of ransomware worldwide.

The DarkComet RAT allows hackers to seize full control of a victim's computer, enabling activities like keylogging, file theft, webcam surveillance and remote desktop access.

Updated Danabot malware emerges after takedown Months after being disrupted as part of the law enforcement effort Operation Endgame, the Danabot banking trojan has resurfaced with the new version 669, according to Cyber Security News.